Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
File: XY9AsSSN49pfXWCX-BBoKTxL7vc.mft (raw, json)
Hash identifier: UOWCBX2fMeohs/mMZJcYpW+C9Ky8Bx7yEjNIfeDe2k8=
Subject key identifier: CD:F9:82:F4:5C:5F:5A:D5:AB:82:93:CD:57:34:CB:4E:65:9A:75:E3
Authority key identifier: 5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
Certificate issuer: /CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Certificate serial: 019E216D47787580FD806C81048A09DBAD60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
Manifest number: 0233
Signing time: Wed 13 May 2026 13:01:10 +0000
Manifest this update: Wed 13 May 2026 13:01:10 +0000
Manifest next update: Thu 14 May 2026 13:01:10 +0000
Files and hashes: 1: XY9AsSSN49pfXWCX-BBoKTxL7vc.crl (hash: kc+9wMHpowsOMVmNlpEs/uqcDQImnYwafVVrD4Vez5M=)
2: _a7gNZLlQxgHn1SWkyljxM4Vp8E.roa (hash: riqb9ZgtO6K145lOcaQYpYRovN3sqPG5Tn86hViYkIc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 06:33:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:21:6d:47:78:75:80:fd:80:6c:81:04:8a:09:db:ad:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d8f40b1248de3da5f5d6097f81068293c4beef7
Validity
Not Before: May 13 13:01:10 2026 GMT
Not After : May 14 13:01:10 2026 GMT
Subject: CN=cdf982f45c5f5ad5ab8293cd5734cb4e659a75e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:51:bc:1e:0e:e3:ad:d5:39:9b:1b:95:3b:00:
bd:90:24:23:e6:46:6e:1d:6c:fb:69:2b:05:41:8a:
35:10:77:b9:18:1e:68:0b:b1:2a:bc:f9:68:0d:bf:
6e:75:a1:82:a2:5c:94:44:cb:9c:b0:6d:9e:39:b3:
08:ba:b9:e6:1d:ce:ed:f6:ed:61:83:39:1d:77:f0:
f3:70:3b:95:03:e3:bd:31:0a:d9:12:62:df:19:e5:
39:36:c5:20:21:0d:28:1b:80:4a:89:16:2d:7c:01:
40:07:05:72:1f:27:71:15:77:44:30:84:b6:1d:ac:
e1:58:2c:4e:42:95:f2:37:e9:7d:27:e0:8f:93:ab:
cd:ce:e2:5e:70:dc:71:92:ef:f9:7c:41:2e:d5:87:
57:7f:64:3c:44:50:54:1a:95:6c:a6:d4:6d:99:0e:
80:8c:04:7e:46:37:64:13:32:f4:3d:d8:bf:76:5e:
58:0f:45:49:53:fe:a2:8c:00:b9:37:0c:ed:29:57:
a9:ac:c5:eb:1e:5f:d8:98:6b:95:a7:52:13:ab:b7:
4f:29:01:49:b9:72:c0:05:9f:ec:36:ae:31:99:a6:
fb:3c:99:a8:7e:8d:e0:23:e8:b6:a4:fe:81:be:f6:
32:2e:f7:e2:69:27:15:54:a3:1c:6d:4e:78:2d:ff:
24:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F9:82:F4:5C:5F:5A:D5:AB:82:93:CD:57:34:CB:4E:65:9A:75:E3
X509v3 Authority Key Identifier:
keyid:5D:8F:40:B1:24:8D:E3:DA:5F:5D:60:97:F8:10:68:29:3C:4B:EE:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XY9AsSSN49pfXWCX-BBoKTxL7vc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/10fea8-4f9c-42e2-b041-bd65fed67dc6/1/XY9AsSSN49pfXWCX-BBoKTxL7vc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:7f:b8:8d:67:a1:d4:97:98:9e:f1:ec:03:de:08:65:48:7d:
26:c4:0e:97:de:46:a2:5e:5f:a4:9d:e6:c3:ce:09:8a:d7:90:
c1:0a:19:bd:09:83:88:c1:7e:3c:09:08:7c:d6:82:5a:52:24:
51:7b:e3:1b:cc:2f:bb:61:8b:fb:b8:55:ca:f0:fe:37:70:68:
b4:26:20:4a:c6:a2:b6:2e:e9:f4:d5:1c:49:af:1e:73:aa:84:
58:a5:1f:41:43:03:53:d6:0c:fa:0e:ef:cf:0e:1a:12:97:52:
b8:62:90:ea:dc:74:0e:69:d2:7f:de:3b:db:dc:db:6a:f9:73:
81:f0:cc:69:61:ea:30:96:d3:3f:6d:c9:db:75:1b:d7:5e:f8:
ab:62:01:e4:a2:f5:69:59:ed:c5:49:1d:47:33:ef:54:09:c7:
be:91:00:cc:22:e6:bc:c6:e9:c1:e3:64:50:d4:0d:36:e3:f0:
62:24:c1:82:5f:b6:c4:14:0b:6b:3f:8b:5f:b4:8f:9b:6a:4c:
76:1a:1a:26:da:16:49:8e:d3:29:a0:36:8e:f2:d8:3a:c1:71:
fd:c5:3b:f4:9e:0b:d9:a5:77:ee:89:5d:2a:ef:d8:21:76:ad:
2a:bb:e5:ab:b6:cb:4a:ab:c0:7c:e7:30:cc:3b:ed:bb:d6:d7:
3a:33:75:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:12:08 2026 by rpki-client